Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: t1/4Greu1K+yMqR5rupBe+aV4dVHyvTaARTDC/ECmeg=
Subject key identifier: BA:0B:07:2C:23:70:D6:89:A9:02:5F:D4:5A:AA:65:AE:D4:CB:F1:97
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 019748FA3B66597B43DDE381A16C40557E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:00:48 +0000
Manifest this update: Sat 07 Jun 2025 06:00:48 +0000
Manifest next update: Sun 08 Jun 2025 06:00:48 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: DI1j+8BMd6OflbskBKEvQ9kDo46SsfWdF5YHfYb59bw=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:3b:66:59:7b:43:dd:e3:81:a1:6c:40:55:7e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Jun 7 06:00:48 2025 GMT
Not After : Jun 8 06:00:48 2025 GMT
Subject: CN=ba0b072c2370d689a9025fd45aaa65aed4cbf197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:20:b2:ae:d3:e5:6c:f1:15:b4:cc:0e:b4:
62:75:f3:25:84:64:41:d9:8b:f2:6e:2e:14:97:b0:
57:08:bf:e8:f5:8b:9a:3a:25:e8:14:07:f7:d4:22:
44:dd:cb:7d:6a:1d:8d:cf:66:2e:25:3e:7b:f9:bc:
31:12:be:26:d6:e7:40:83:94:fe:60:ae:59:e7:0d:
6e:ed:94:1e:69:d6:dc:0e:4e:7a:56:20:f6:ac:84:
78:90:4d:8c:38:df:af:13:94:55:9d:a2:6c:74:9d:
32:b8:4a:e1:13:79:35:43:0d:49:8e:31:5c:58:59:
83:85:b8:19:b5:46:7e:b0:29:da:44:45:2b:eb:b4:
06:67:7b:23:87:f6:24:46:f0:df:9c:a3:52:05:19:
2a:da:fb:e2:76:37:5f:45:b1:68:05:e7:68:0f:42:
f3:a4:8a:d6:5b:ad:cb:5a:9a:cf:5c:f6:54:db:66:
b2:56:da:24:f7:78:dd:c8:d2:ad:50:59:fc:d8:9e:
aa:f8:34:f2:82:94:6b:ef:ac:75:e2:f3:96:63:1f:
62:c5:20:20:9e:b1:90:2e:5d:1a:bf:ee:23:0f:2f:
b3:3b:9a:7c:19:3e:a1:9a:10:5f:4d:b5:fa:09:3a:
9b:df:30:58:3f:69:5c:c6:27:ae:c9:af:57:15:d1:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:07:2C:23:70:D6:89:A9:02:5F:D4:5A:AA:65:AE:D4:CB:F1:97
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0f:63:00:1f:11:0e:cc:c3:f5:34:65:36:6d:cf:d1:0f:0b:
97:a1:43:75:ad:28:13:1b:43:4d:fb:89:54:b4:fc:32:21:d7:
a3:19:ca:19:60:b8:b8:6d:1b:b4:0c:1a:a2:94:67:d8:ff:b1:
44:a7:72:23:0e:32:12:83:68:57:75:dc:1d:01:02:05:03:d6:
25:62:10:66:f4:8a:f8:44:eb:b8:81:03:66:6e:76:82:72:9a:
7c:cd:fc:8c:80:14:ee:72:ac:21:cd:9a:69:cb:1e:39:aa:7d:
8f:48:8d:53:b5:f7:d3:2f:5c:d0:d1:84:f2:8c:d4:6e:82:56:
6e:dc:56:17:dc:e6:61:2b:ee:f5:16:83:df:93:c6:51:9d:3f:
67:a5:40:2e:c1:1e:dc:c0:70:94:75:db:43:00:94:ef:ee:ce:
22:74:f0:97:38:04:f9:01:97:7d:0e:90:39:a6:bf:70:f5:ee:
98:d4:c6:11:78:ab:a7:48:95:b7:04:40:c7:42:9f:cb:89:c9:
40:a2:f1:b9:8e:72:ff:4b:3c:c8:05:e2:ee:98:16:13:7c:0d:
77:ff:9e:71:59:d1:5c:ed:fc:a0:30:8f:8e:a8:0e:c7:60:f5:
2a:f5:32:c7:38:24:7c:57:d5:0e:a1:bf:83:60:ad:d3:3b:b2:
96:e5:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:54 2025 by rpki-client